# CVE-2017-5594: Pagekit CMS password reset vulnerability in debug toolbar

Source: https://junglewise.ai/threats/cve-2017-5594-pagekit-cms-password-reset-vulnerability-in-debug-toolbar  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2017-01-25. Updated: 2026-05-13  
License: CC BY 4.0 with a link back

CVE-2017-5594 · Severity: high · CVSS 7.5 · Published 2017-01-25

Pagekit CMS, a content management system, contains a vulnerability that allows unauthorized individuals to take over user accounts. When the software's debug mode is active, attackers can intercept password reset tokens intended for legitimate users. This could lead to a complete compromise of the website's administration or user accounts, potentially resulting in data theft or site defacement.

Technologies: [pagekit/pagekit (Packagist)](https://junglewise.ai/threats/technologies/pagekit-pagekit), [Pagekit](https://junglewise.ai/threats/technologies/pagekit), [Pagekit CMS](https://junglewise.ai/threats/technologies/pagekit-cms). Vendors: [Packagist](https://junglewise.ai/threats/vendors/packagist), [Pagekit](https://junglewise.ai/threats/vendors/pagekit).

## Quick answers

**Is CVE-2017-5594 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2017-5594 being exploited in the wild.

**How severe is CVE-2017-5594?** High severity, with a CVSS score of 7.5, published 25 January 2017.

**Which products and versions are affected?** pagekit/pagekit (Packagist) ECOSYSTEM:introduced=0,fixed=1.0.11; Pagekit CMS < 1.0.11.

**Is there a fix for CVE-2017-5594?** Yes. pagekit/pagekit (Packagist): upgrade to 1.0.11 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2017-5594 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2017-5594?** Check whether you run pagekit/pagekit (Packagist), Pagekit or Pagekit CMS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- pagekit/pagekit (Packagist): upgrade to 1.0.11 or later

  ```sh
  composer require pagekit/pagekit:^1.0.11
  ```


## Technical details

A weak password recovery mechanism (CWE-640) exists in Pagekit CMS before version 1.0.11. When the debug toolbar is enabled, sensitive information including password reset tokens is exposed in the debug logs. A remote attacker can retrieve the debug session ID from the login page and use it to access the debug bar data. By monitoring these logs, an attacker can capture the 'user' and 'key' parameters generated during a legitimate password reset request, allowing them to complete the reset process and take over the account. This vulnerability is mitigated by the requirement that the debug toolbar must be enabled and requires some user interaction (the victim must initiate a password reset).

## Affected products

- Pagekit Pagekit CMS < 1.0.11

## Identifiers

- CVE-2017-5594
- GHSA-rp89-32rp-qpq2

## Timeline

- 2017-01-21: disclosed: Initial discovery and exploit publication by SecureLayer7
- 2017-01-25: advisory: NVD publication date
- 2017-01-25: patched: Pagekit version 1.0.11 released to address the issue

## References

- [http://www.securityfocus.com/bid/95806](http://www.securityfocus.com/bid/95806)
- [https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b](https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268b)
- [https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf](https://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf)
- [https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt](https://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt)
- [https://www.exploit-db.com/exploits/41143/](https://www.exploit-db.com/exploits/41143/)

## Related threats

- [Pagekit CMS SQL injection in user authentication](https://junglewise.ai/threats/cve-2026-88756-pagekit-cms-1-0-18-allows-an-unauthenticated-attacker-to-perform)
- [Pagekit CMS privilege escalation in UserApiController](https://junglewise.ai/threats/cve-2026-57518-pagekit-cms-privilege-escalation-in-userapicontroller)
- [An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.](https://junglewise.ai/threats/cve-2025-67165-pagekit-cms-has-an-insecure-direct-object-reference-idor-in-its)
- [Pagekit CMS is vulnerable to OS Command Injection via Storage component](https://junglewise.ai/threats/cve-2025-67164-pagekit-cms-is-vulnerable-to-os-command-injection-via-storage)
- [Pagekit Cross-site Scripting vulnerability](https://junglewise.ai/threats/cve-2024-45967-pagekit-cross-site-scripting-vulnerability)